Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:spectrum_protect_for_virtual_environments:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductSpectrum Protect For Virtual Environments (78f5de20-bcd0-5a4d-bd2a-d2e8f3c35b69)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-33832 vulnerable 2026-06-08 06:06:23.561146 IBM Storage Protect denial of service
MEDIUM (6.2)
IBM Spectrum Protect 8.1.0.0 through 8.1.17.0 could allow a local user to cause a denial of service due to due to improper time-of-check to time-of-use functionality. IBM X-Force ID: 256012.
Published: 2023-07-19T00:51:17.495Z
Updated: 2024-10-21T14:09:02.331Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-20532 vulnerable 2026-06-08 05:29:09.421231 Details available
HIGH (7.4)
IBM Spectrum Protect Client 8.1.0.0 through 8.1.11.0 could allow a local user to escalate their privileges to take full control of the system due to insecure directory permissions. IBM X-Force ID: 198811.
Published: 2021-04-26T16:30:43.722Z
Updated: 2024-09-16T19:36:15.162Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-2025 vulnerable 2026-06-08 05:11:29.955551 Details available
MEDIUM (5.1)
IBM Spectrum Protect Backup-Archive Client and IBM Spectrum Protect for Virtual Environments 7.1 and 8.1 creates directories/files in the CIT sub directory that are read/writable by everyone. IBM X-Force ID: 155551.
Published: 2019-11-25T17:01:23.893Z
Updated: 2024-09-16T18:55:25.263Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1447 vulnerable 2026-06-08 05:11:18.220221 Details available
MEDIUM (5.1)
The GSKit (IBM Spectrum Protect 7.1 and 7.2) and (IBM Spectrum Protect Snapshot 4.1.3, 4.1.4, and 4.1.6) CMS KDB logic fails to salt the hash function resulting in weaker than expected protection of passwords. A weak password may be recovered. Note: After update the customer should change password to ensure the new password is stored more securely. Products should encourage customers to take this step as a high priority action. IBM X-Force ID: 139972.
Published: 2018-04-04T18:00:00.000Z
Updated: 2024-09-17T01:50:34.113Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-1378 vulnerable 2026-06-08 05:09:21.966318 Details available
IBM Spectrum Protect 7.1 and 8.1 (formerly Tivoli Storage Manager) disclosed unencrypted login credentials to Vmware vCenter in the application trace output which could be obtained by a local user. IBM X-Force ID: 126875.
Published: 2017-10-05T17:00:00.000Z
Updated: 2024-09-17T01:46:09.210Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.